This repository contains a library of open source Flexera Policy Templates. All contributions are shared under the MIT license.
Those who wish to contribute to this repository should review the Contribution Guide and Catalog Style Guide to ensure that their contributions follow the expected flow and meet the necessary standards.
These templates can generate savings estimates for your environment. The incidents they raise are scraped for recommendations for the Cost Optimization section of Flexera One.
-
All
-
Compute
-
Database
-
EBS
-
Network
-
RDS
-
Storage
-
Usage Discount
-
Compute
- Azure Hybrid Use Benefit for Windows Server
- Azure Long Stopped Compute Instances
- Azure Reserved Instances Recommendations
- Azure Rightsize Compute Instances
- Azure Savings Plan Recommendations
- Azure Superseded Compute Instances
- Azure Unused IP Addresses
- Turbonomic Allocate Virtual Machine Recommendations Azure
- Turbonomic Rightsize Virtual Machines Recommendations Azure
-
Databricks
-
Managed Disks
-
MySQL
-
NetApp Files
-
Network
-
PaaS
-
SQL
-
Storage
-
Storage Accounts
-
Usage Discount
-
Kubernetes
-
Spot Security
-
Compute
-
Storage
-
Kubernetes
-
Compute
-
Identity & Access Management
-
Organization
-
RDS
-
All
-
Compute
-
Identity & Access Management
-
N/A
-
Cloud Cost Optimization
-
IT Asset Management
-
Identity & Access Management
-
Git
-
All
-
CloudTrail
-
Compute
- AWS Burstable EC2 Instances
- AWS EC2 Instances Time Stopped Report
- AWS EKS Clusters Without Spot Instances
- AWS Expiring Reserved Instances
- AWS Expiring Savings Plans
- AWS Reserved Instances Coverage
- AWS Reserved Instances Utilization
- AWS Savings Plan Utilization
- AWS Savings Realized From Rate Reduction Purchases
- AWS Schedule Instance
-
Marketplace
-
Storage
-
All
-
Compute
- Azure Compute Instances Time Powered Off Report
- Azure Expiring Reserved Instances
- Azure Expiring Savings Plans
- Azure Hybrid Use Benefit for Linux Server
- Azure Reserved Instances Utilization
- Azure Reserved Instances Utilization MCA
- Azure Savings Plan Utilization
- Azure Savings Realized from Reservations
- Azure Schedule Instance
-
Marketplace
-
Network
-
PaaS
-
SQL
-
Storage Accounts
-
Common Bill Ingestion
-
Cloud Cost Optimization
- Budget Alerts
- Budget vs Actual Spend Report
- Cloud Cost Anomaly Alerts
- Cloud Spend Forecast - Straight-Line
- Cloud Spend Moving Average Report
- Currency Conversion
- Email Cost Optimization Recommendations
- Flexera FOCUS Report
- Low Usage Report
- New Usage
- Scheduled Report
- Scheduled Report for Unallocated Costs
- Vendor Spend Commitment Forecast
-
Common Bill Ingestion
-
Spot Eco
-
All
-
Compute
-
Storage
-
Common Bill Ingestion
-
Compute
-
PaaS
-
Tags
-
AKS
-
Compute
-
PaaS
-
Tags
-
Automation
-
Cloud Cost Optimization
-
FlexNet Manager
-
IT Asset Management
-
Identity & Access Management
-
Kubernetes
-
N/A
-
SaaS Manager
- SaaS Manager - Deactivated Users
- SaaS Manager - Deactivated Users for Integrated Applications
- SaaS Manager - Duplicate User Accounts
- SaaS Manager - Redundant Apps
- SaaS Manager - Renewal Reminder
- SaaS Manager - Suspicious Users
- SaaS Manager - Unsanctioned Applications with Existing Contract
- SaaS Manager - Unsanctioned Spend
-
Office 365
-
CloudTrail
- AWS CloudTrail Not Enabled In All Regions
- AWS CloudTrail S3 Buckets Without Access Logging
- AWS CloudTrails Not Integrated With CloudWatch
- AWS CloudTrails Without Encrypted Logs
- AWS CloudTrails Without Log File Validation Enabled
- AWS CloudTrails Without Object-level Events Logging Enabled
- AWS Publicly Accessible CloudTrail S3 Buckets
-
Config
-
DBS
-
EBS
-
Identity & Access Management
- AWS IAM Account Missing Support Role
- AWS IAM Attached Admin Policies
- AWS IAM Expired SSL/TLS Certificates
- AWS IAM Insufficient Required Password Length
- AWS IAM Password Policy Not Restricting Password Reuse
- AWS IAM Root Account Access Keys
- AWS IAM Root User Account Without Hardware MFA
- AWS IAM Root User Account Without MFA
- AWS IAM Root User Doing Everyday Tasks
- AWS IAM User Accounts Without MFA
- AWS IAM Users With Directly-Attached Policies
- AWS IAM Users With Multiple Active Access Keys
- AWS IAM Users With Old Access Keys
- AWS Regions Without Access Analyzer Enabled
- AWS Unused IAM Credentials
-
KMS
-
Network
-
RDS
-
S3
-
Storage
-
App Service
-
Identity & Access Management
-
MySQL
-
Network Security Group
-
PostgreSQL
-
SQL
- Azure Publicly-Accessible SQL Managed Instances
- Azure SQL Databases Without Encryption
- Azure SQL Servers Vulnerability Assessment Does Not Notify Admins
- Azure SQL Servers Vulnerability Assessment Without Email Notifications
- Azure SQL Servers Vulnerability Assessment Without Periodic Scans
- Azure SQL Servers With Insufficient Auditing Retention
- Azure SQL Servers Without Active Directory Admin
- Azure SQL Servers Without Advanced Threat Protection (ATP)
- Azure SQL Servers Without Auditing Enabled
- Azure SQL Servers Without Vulnerability Assessment (VA) Enabled
-
Security
-
Storage
- Azure Blob Storage Accounts Without Logging Enabled
- Azure Blob Storage Accounts Without Soft Delete Enabled
- Azure Publicly-Accessible Blob Containers
- Azure Queue Storage Accounts Without Logging Enabled
- Azure Storage Accounts Allowing Default Network Access
- Azure Storage Accounts Without Secure TLS
- Azure Storage Accounts Without Secure Transfer
- Azure Storage Accounts Without Trusted Microsoft Services Access
- Azure Table Storage Accounts Without Logging Enabled
-
Storage
Some policies require external data sets to function. These data sets are stored in the data directory. The following data sets are available:
- Flexera IAM Roles
- AWS Regions
- AWS EC2 Instance Types
- AWS ElastiCache Types
- AWS EC2 Pricing
- AWS RDS Pricing
- Azure Regions
- Azure VM Instance Types
- Azure SQL Service Tier Types
- Azure SQL Managed Instance Tier Types
- Azure VM Pricing
- Azure MD Pricing
- Azure DB Storage Pricing
- Azure SQL Managed Instance Storage Pricing
- Google Regions
- Google VM Instance Types
- Google VM Pricing
- Currency Reference
- TZ Database Timezone List
- Files with the extension
.ptare policy templates that can be used in Flexera One. - Select the desired policy template, click on the “Raw” button, and then right-click and choose “Save As” to save the file to your computer.
- To upload the template to your account, navigate over to the Templates page in the left navigation bar in Governance. Ensure you have the role to access policy management in RightScale. Learn More about Policy Access Control.
- Click the “Upload Policy Template” button in the account you wish to test the policy and follow the instructions to upload the template you just downloaded.
- Getting Started
- Reference Documentation
- Policy Template Language
- Policy Development Training
- Markdown Editor - Use this to test Markdown Syntax
Before reaching out for help, please make use of the Troubleshooting Guide to diagnose the issue. Many issues have simple, straight-forward resolutions.
For most issues that you're unable to diagnose/resolve, it is recommended that you contact support via the Flexera Community.
If you're experiencing an issue that you are fairly certain is a bug with the policy template itself, please raise an Issue and include as much detail about the issue as you can. Note that, if investigation shows an issue with the Flexera platform or with the local configuration/usage of the policy template rather than a problem with the policy template itself, you will be directed to contact support via the Flexera Community.